Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/m8kwedhkoAjuZLtJRMKvNl6MA9Y.roa
File: m8kwedhkoAjuZLtJRMKvNl6MA9Y.roa (raw, json)
Hash identifier: TR+TSUwkPbEn4vgOwkUABM9WwVCAwXxI5yy1lm4pN4A=
Subject key identifier: 9B:C9:30:79:D8:64:A0:08:EE:64:BB:49:44:C2:AF:36:5E:8C:03:D6
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 018EFBA57612887F0C23C5CE41E0A41A5BFD
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/m8kwedhkoAjuZLtJRMKvNl6MA9Y.roa
Signing time: Sat 20 Apr 2024 13:15:08 +0000
ROA not before: Sat 20 Apr 2024 13:15:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29577
IP address blocks: 194.146.148.0/24 maxlen: 24
194.146.149.0/24 maxlen: 24
194.146.150.0/24 maxlen: 24
194.146.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Apr 2024 06:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:a5:76:12:88:7f:0c:23:c5:ce:41:e0:a4:1a:5b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Apr 20 13:15:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bc93079d864a008ee64bb4944c2af365e8c03d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:73:f0:73:71:2d:9e:77:e6:95:13:4c:04:
11:ad:a0:4d:4e:60:30:8b:2d:3f:2b:18:4c:15:c6:
7a:4d:68:8e:b3:a6:73:50:54:65:4b:51:58:f0:d5:
9d:9b:d6:3a:e0:4c:5f:0c:08:21:03:c7:27:69:e4:
94:bd:4e:aa:4a:13:7a:a8:3a:a0:b2:6d:cd:d8:aa:
2c:81:c5:d7:fd:fa:2d:15:a2:2f:f6:ac:1e:10:ec:
67:b0:f6:d2:c8:04:2f:9e:d8:5b:08:ee:00:fd:a9:
35:e6:b5:81:cc:d1:43:4e:aa:c0:98:57:3e:0e:76:
d6:09:61:e9:11:28:7f:3a:e2:12:de:c8:7f:3f:38:
54:34:8e:bc:86:26:c2:22:b7:82:a9:de:23:6d:7a:
2b:87:24:1d:52:df:a4:27:10:82:e3:10:29:0d:90:
fd:66:fa:4f:6e:f3:6b:f1:a7:b3:5e:11:98:40:e6:
4e:67:8d:e9:d0:61:0e:06:1c:22:0c:3e:36:26:a6:
11:54:db:95:30:11:e8:f3:d2:8f:45:03:29:85:8b:
55:81:7b:04:a9:73:ff:fa:b2:4f:38:c1:5f:be:59:
a7:1b:00:2c:32:72:9c:86:f2:67:3c:5d:02:e4:e0:
0a:4d:ac:5d:a7:0f:f3:b6:4e:10:4f:6a:d9:a9:3d:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:30:79:D8:64:A0:08:EE:64:BB:49:44:C2:AF:36:5E:8C:03:D6
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/m8kwedhkoAjuZLtJRMKvNl6MA9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.148.0/22
Signature Algorithm: sha256WithRSAEncryption
96:01:6f:20:79:72:fd:04:31:f6:94:24:8b:06:13:82:ee:82:
95:2a:b2:06:69:9e:77:66:85:a2:04:04:da:e0:91:bc:a5:34:
29:f8:b9:8b:50:33:c6:6d:3c:58:12:f8:f9:69:2e:20:f3:13:
f8:7c:9c:14:b0:45:70:28:6f:51:9d:05:39:dd:df:6b:77:a6:
ce:d7:ee:64:cd:f5:2e:16:66:64:f1:91:2a:83:fe:e7:70:fc:
50:b2:db:d1:8c:d9:62:12:68:00:5f:fa:8f:3f:63:01:57:33:
d5:8e:fe:3a:44:02:10:e3:04:87:8e:0a:f3:ec:9f:97:fe:87:
7b:e8:41:2e:47:d8:5c:26:c2:63:60:8a:28:08:f9:2c:74:c0:
30:7e:01:42:53:07:79:36:2f:96:3e:29:5e:2c:f9:e1:71:e2:
7d:d4:b2:7a:6a:59:ac:ba:9e:0e:95:29:ec:6b:65:d3:88:52:
28:66:03:dd:a7:9d:cd:5f:79:4b:52:5d:9b:b5:b8:7d:8c:64:
09:40:a5:70:3d:46:ae:e1:c1:b1:f3:04:75:fe:bf:da:0b:17:
0d:24:30:0a:ae:6f:bd:44:3e:f6:a6:e1:c3:29:e7:2a:39:5c:
39:af:3b:26:54:1f:e2:fc:fa:b8:cd:45:13:86:ba:9c:8f:cf:
ef:59:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:07 2024 by rpki-client on console-ams.rpki-client.org